CVE-2026-63926

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-63926

Key Details

CVE	CVE-2026-63926
CVSS Score / Version	8.4 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

bpf: sockmap: fix tail fragment offset in bpf_msg_push_data

When bpf_msg_push_data() inserts data in the middle of a scatterlist

entry, it splits the original entry into a left fragment and a right

fragment.

The right fragment offset is page-local, but the code advances it with

`start`, which is the message-global insertion point. For inserts into a

non-first SG entry, this over-advances the offset and leaves the split

layout inconsistent.

Advance the right fragment offset by the fragment-local delta,

`start - offset`, which matches the length removed from the front of the

original entry. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-63926
CVE	https://www.cve.org/CVERecord?id=CVE-2026-63926

Source

Reference

NVD

CVE